Citizen Centric Approach to Data - GDPR Revisited